Website security scan results for www.2050sbeauty.com
Scanned dusing the Idyllum Labs website security scanner at www.idyllum.com
Please sign up for a free account to initiate real-time scans, export data and make queries with full capabilities.
At a glance
------------------
Title: 2050'S Skin Care & Spa, 2050'S Beauty & Cosmetic, Philadelphia, PA
SSL Status: [OK] SSL Encryption enforced
Location: United States (['35.246.6.109'])
Total OWASP ZAP alerts: 20
Nmap open ports found: 2
SSL Status: [OK] SSL Encryption enforced
Location: United States (['35.246.6.109'])
Total OWASP ZAP alerts: 20
Nmap open ports found: 2
Network
Owner email: hostmaster@nsone.netNameservers:
ns10.wixdns.net(216.239.36.100) - Primary NS: dns1.p01.nsone.net
ns11.wixdns.net(216.239.38.100) - Primary NS: dns1.p01.nsone.net
Redirected from: 2050sbeauty.com
WhatWeb scan for www.2050sbeauty.com
Results from Jan. 24, 2023, 6:39 p.m.
------------------
["http://www.2050sbeauty.com",301,[["RedirectLocation",[{"name":"location","string":"https://www.2050sbeauty.com/","certainty":100}]],["Country",[{"string":"UNITED STATES","module":"US","certainty":100}]],["Strict-Transport-Security",[{"search":"headers[Strict-Transport-Security]","string":["max-age=120"],"regexp_compiled":"(?-mix:^(.*)$)","certainty":100}]],["HTTPServer",[{"name":"server string","string":"Pepyaka/1.19.10","certainty":100}]],["IP",[{"string":"35.246.6.109","certainty":100}]],["UncommonHeaders",[{"name":"headers","string":"x-wix-request-id,server-timing,x-seen-by,x-content-type-options","certainty":100}]]]]
["https://www.2050sbeauty.com/",200,[["Bootstrap",[{"regexp":["<script src=\"https://static.parastorage.com/services/wix-thunderbolt/dist/bootstrap"],"regexp_compiled":"(?-mix:<script [^>]*bootstrap)","certainty":100}]],["Country",[{"string":"UNITED STATES","module":"US","certainty":100}]],["Title",[{"name":"page title","string":"2050'S Skin Care & Spa, 2050'S Beauty & Cosmetic, Philadelphia, PA","certainty":100}]],["Email",[{"string":["14370afcdc17429f9e418d5ffbd0334a@sentry.wixpress.com","8c4075d5481d476e945486754f783364@sentry.io"],"regexp_compiled":"(?i-mx:[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]{2,4})","certainty":100}]],["Strict-Transport-Security",[{"search":"headers[Strict-Transport-Security]","string":["max-age=120"],"regexp_compiled":"(?-mix:^(.*)$)","certainty":100}]],["Cookies",[{"string":"ssr-caching","certainty":100},{"string":"XSRF-TOKEN","certainty":100}]],["HTTPServer",[{"name":"server string","string":"Pepyaka/1.19.10","certainty":100}]],["X-UA-Compatible",[{"string":["IE=edge"],"regexp_compiled":"(?i-mx:<meta http-equiv[\\s]*=[^>]*X-UA-Compatible[^>]*[\\s]+content[\\s]*=[\\s]*['|\"]?([a-z0-9=]+)[^>]*>)","certainty":100}]],["Content-Language",[{"string":"en","certainty":100}]],["HTML5",[{"regexp":["<!DOCTYPE html>"],"regexp_compiled":"(?i-mx:<!DOCTYPE html>)","certainty":100}]],["MetaGenerator",[{"string":["Wix.com Website Builder"],"regexp_compiled":"(?i-mx:<meta[^>=]+name[\\s]*=[\\s]*[\"|']?generator[\"|']?[^>=]+content[\\s]*=[\\s]*\"([^\"'>]+)\")","certainty":100}]],["IP",[{"string":"35.246.6.109","certainty":100}]],["UncommonHeaders",[{"name":"headers","string":"link,server-timing,x-seen-by,x-wix-request-id,x-content-type-options","certainty":100}]],["Script",[{"regexp":[" ",">"],"regexp_compiled":"(?i-mx:<script(\\s|>))","certainty":100},{"string":["application/json","text/javascript","wix/htmlEmbeds"],"offset":1,"regexp_compiled":"(?-mix:<script[^>]+(language|type)\\s*=\\s*['\"]?([^'\"\\s]+)['\"]?)","certainty":100}]],["Open-Graph-Protocol",[{"regexp":["<meta property=\"og:title\" content=\"2050'S Skin Care & Spa, 2050'S Beauty & Cosmetic, Philadelphia, PA\"/>"],"regexp_compiled":"(?i-mx:<meta[^>]+property=\"og:title\"[^>]*>)","certainty":100},{"version":["website"],"regexp_compiled":"(?-mix:<meta[^>]+property=\"og:type\"[^>]+content=\"([^\"^>]+)\")","certainty":100},{"account":["beauty2050sii"],"regexp_compiled":"(?-mix:<meta[^>]+property=\"fb:admins\"[^>]+content=\"([^\"^>]+)\")","certainty":100}]]]]
Title
2050'S Skin Care & Spa, 2050'S Beauty & Cosmetic, Philadelphia, PAEnvironment info
IP addresses: 35.246.6.109Location: United States
Web server: Pepyaka/1.19.10
Technology
Bootstrap
All keywords
RedirectLocation (https://www.2050sbeauty.com/)
Strict-Transport-Security (['max-age=120'])
UncommonHeaders (x-wix-request-id,server-timing,x-seen-by,x-content-type-options)
Email (['14370afcdc17429f9e418d5ffbd0334a@sentry.wixpress.com', '8c4075d5481d476e945486754f783364@sentry.io'])
Cookies (ssr-caching)
X-UA-Compatible (['IE=edge'])
Content-Language (en)
HTML5
MetaGenerator (['Wix.com Website Builder'])
Script (['application/json', 'text/javascript', 'wix/htmlEmbeds'])
Open-Graph-Protocol (website)
Strict-Transport-Security (['max-age=120'])
UncommonHeaders (x-wix-request-id,server-timing,x-seen-by,x-content-type-options)
Email (['14370afcdc17429f9e418d5ffbd0334a@sentry.wixpress.com', '8c4075d5481d476e945486754f783364@sentry.io'])
Cookies (ssr-caching)
X-UA-Compatible (['IE=edge'])
Content-Language (en)
HTML5
MetaGenerator (['Wix.com Website Builder'])
Script (['application/json', 'text/javascript', 'wix/htmlEmbeds'])
Open-Graph-Protocol (website)
OWASP ZAP Vulnerability Scan for www.2050sbeauty.com
Results from Jan. 24, 2023, 6:40 p.m.
------------------
High risk vulnerabilities
Medium risk vulnerabilities
Low risk vulnerabilities
[10017] FAILED
Cross-Domain JavaScript Source File Inclusion
[]
What does this mean?
Where exactly is this vulnerability found?
The page includes one or more script files from a third-party domain.
- https://www.2050sbeauty.com/sitemap.xml
- https://www.2050sbeauty.com/robots.txt
- https://www.2050sbeauty.com/robots.txt
- https://www.2050sbeauty.com/
- https://www.2050sbeauty.com/
- https://www.2050sbeauty.com/
- https://www.2050sbeauty.com/robots.txt
- https://www.2050sbeauty.com/robots.txt
- https://www.2050sbeauty.com/
- https://www.2050sbeauty.com/sitemap.xml
- https://www.2050sbeauty.com/sitemap.xml
- https://www.2050sbeauty.com/robots.txt
- https://www.2050sbeauty.com/sitemap.xml
- https://www.2050sbeauty.com/
- https://www.2050sbeauty.com/sitemap.xml
- https://www.2050sbeauty.com/robots.txt
- https://www.2050sbeauty.com/sitemap.xml
- https://www.2050sbeauty.com/
- https://www.2050sbeauty.com/robots.txt
- https://www.2050sbeauty.com/
How to solve this?
Ensure JavaScript source files are loaded from only trusted sources, and the sources can't be controlled by end users of the application.
[10096] FAILED
Timestamp Disclosure - Unix
[]
What does this mean?
Where exactly is this vulnerability found?
A timestamp was disclosed by the application/web server - Unix
- https://www.2050sbeauty.com/robots.txt
- https://www.2050sbeauty.com/
- https://www.2050sbeauty.com/sitemap.xml
How to solve this?
Manually confirm that the timestamp data is not sensitive, and that the data cannot be aggregated to disclose exploitable patterns.
Informative alerts
Open ports for www.2050sbeauty.com (Nmap scan)
Results from Jan. 24, 2023, 6:39 p.m.
------------------
Port 80 (tcp)(open)
- http
Port 443 (tcp)(open) - https
Port 443 (tcp)(open) - https
A | ||||
| A | www.elixir.ee | 3600 | 217.146.69.20 | |
AAAA | ||||
| Sorry, no records found | ||||
CNAME | ||||
| CNAME | www.elixir.ee | 3600 | elixir.ee | |
MX | ||||
| MX | www.elixir.ee | 3600 | 5 | ALT2.ASPMX.L.GOOGLE.COM. |
| MX | www.elixir.ee | 3600 | 10 | ALT3.ASPMX.L.GOOGLE.COM. |
| MX | www.elixir.ee | 3600 | 10 | ALT4.ASPMX.L.GOOGLE.COM. |
| MX | www.elixir.ee | 3600 | 1 | ALTMX.ASPMX.L.GOOGLE.COM. |
NS Records | ||||
| NS | elixir.ee | 3600 | ns2.zone.ee. (85.234.242.32) | |
| NS | elixir.ee | 3600 | ns.zone.eu. (217.146.66.65) | |
| NS | elixir.ee | 3600 | ns3.zonedata.net. (90.191.225.242) | |
TXT | ||||
| TXT | elixir.ee | 3600 | v=spf1 a mx include:_spf.zone.eu include:_spf.google.com ~all | |
This report was generated with the Idyllum Labs Website security tool.
Get your report www.idyllum.com
What next?
------------------Dig deeper
- Log in or create a free account to gain access to this report in its entirety.
- Use our dashboard to automate security testing and set up automatic monitoring for your website portfolio.
- Scan a new domain or initiate a rescan for this domain.
Join our ranks
- Use these insights to build your systems bullet-proof.
- Explore our datasets and compare your results.
- Drop us a line! Help us expand our code or cloud or just say hi!
- Support the cause - your donation helps to keep this service free and unbiased.
Idyllum Labs is on a mission
------------------Is the code hosted at www.2050sbeauty.com vulnerable to cybersecurity attacks? Are the used systems up to date and respecting the security standards of 2023?
We at Idyllum Labs wanted to find out! That is why we built this automated website security scanner and generated this report.
Please note
This is an automated and unbiased website vulnerability scan for the domain www.2050sbeauty.com and has nothing to do with human subjectivity, thoughts, opinions, or relationships.
Our cloud-based infrastructure crawls the internet using a mixture of OWASP ZAP, Nmap, Whatweb, and other great software to detect website security issues. We display this data for educational purposes - to give security guidelines for anyone interested in building a safer web environment.
If you have comments, don't agree with the results, or want to submit a site for manual examination, don't hesitate to contact us.
Run a free OWASP ZAP scan for any website at Idyllum.com!
